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(57) Abstract: A system for determining the amount of processing that has been applied to watermarked signal. A steganographic 
signal (3) is provided that includes an original signal (1) and an embedded fragile watermark (22). The fragile watermark is char- 
acterized by a low energy and a high redundancy in comparison to a robust watermark. The steganographic signal is communicated 
over a distribution chanel (4) to a decoder (10). At the decoder, a measure of a presence of the fragile watermark in the acquired 
steganographic signal is provided, along with an estimate of the fragility profile of the fragile watermark for this particular original 
signal. Based on these factors, an estimate is made of the amount of processing that the steganographic signal has undergone. This 
processing can include, for example, A/D and D/A conversions, resampling, band-limiting, perceptual compression/decompression, 
etc. Optionally, the fragility profile is derived prior to the distribution of the content and communicated by the steganographic signal 
for recovery by the decoder (10). Furthermore, a robust watermark may be provided in the steganographic signal that, e.g., designates 
the presence of the fragile watermark to a decoder (10). 
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METHOD AND APPARATUS FOR DETECTING PROCESSING STAGES 

APPLIED TO A SIGNAL 

BACKGROUND OF THE INVENTION 

The present invention relates to processing of 
5 various signals (e.g., audio, video, and images) with 

embedded auxiliary data, or "watermarks", that are 
provided, e.g., for copyright protection purposes. 

The promises of online distribution of digitized 
content are accompanied by an increasing threat of 

10 piracy. Digital content, such as digital music, video 

and still images, can now be freely communicated over 
computer networks such as the Internet. The 
entertainment industry is contemplating the 
opportunities of electronic commerce, where the true 

15 value of the product (the digital content) is 

dissociated from any particular physical medium (such as 
a compact disc (CD) , digital video disc (DVD) , or the 
like) . While it enables a greater degree of flexibility 
in its distribution and a lower cost, the commerce of 

20 disembodied information raises serious copyright issues. 

Indeed, digital data can be re-packaged, duplicated and 
re-distributed at virtually no cost, potentially turning 
piracy into a simple "click and drag" process. 

The usage and distribution of digitized content can 

25 reasonably be controlled as long as it remains within a 

proprietary format (or "secure environments") . However, 
the wide availability of various open formats makes it 
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easy for any user to capture the content and re-package 
it outside this "secure environment". This is typically 
the first stage of a pirate distribution scheme. 

For example, a user may purchase an audio CD 
5 anonymously from a store. The user may then extract 

("rip") the audio content of this CD with a general 
purpose personal computer (PC) . The user may further 
compress the resulting audio files using some arbitrary 
open source compression utility (MP3 for instance) . 

10 Finally, the user may wish to redistribute (free of 

charge or not) the resulting shorter, compressed files 
through a free or low-cost online distribution scheme 
such as email, File Transfer Protocol (FTP) or Hypertext 
Transfer Protocol (HTTP) . This kind of piracy is a 

15 great threat to the music industry, and it can be 

generalized to other types of contents and industries. 
For example, audio renditions of books, as well as 
lectures, interviews, educational and business 
presentations, and the like, are all subject to piracy. 

20 Audio/video data, such as movies, is similarly subject 

to piracy. 

It naturally follows that various usage and copy 
control applications call for solutions that allow 
viewer/player/copying devices or systems to detect 
25 whether an acquired copy of valuable content (e.g., the 

audio content to be protected) has undergone any such 
illicit re-packaging. 

A way to achieve this goal is to design a system 
that quantifies the amount of processing that was 
3 0 applied to the valuable content since it was originally 
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distributed. For this purpose, the use of a volatile 
data layer is a commonly accepted concept. This 
volatile data layer, sometimes referred to as a "Fragile 
Watermark, " is embedded within, or packaged along with 
5 the valuable content it protects. As the content is 

transferred onto a different medium type (or a different 
format) , this volatile data layer is typically expected 
to be lost. Such a vanishing mark is also typically 
used in collaboration with a persistent data layer (e.g. 

10 a "Robust Watermark"), which is intended to survive such 

re-packaging of the valuable content, while signaling 
that the original copy of the content carried a volatile 
data layer. When the viewer/player/copying device or 
system is presented with the resulting copy of the 

15 content, it will look for this volatile data if the 

persistent data layer indicates that it should be there. 
The presence of such persistent data and the absence of 
the volatile data layer is an indication that the 
content was re-packaged. Clearly, such volatile data 

20 should be resistant to forgery. Indeed, the ability of 

a non-authorized entity (e.g., pirate) to create (or re- 
create) such volatile data is the major threat scenario 
in the context of such systems. 

Regardless of the actual methodology that is 

25 suggested by the prior art to carry the volatile and the 

persistent data layers, these proposals all share 
similar concept for the desired behavior of a Fragile 
Watermark layer. Moreover, these proposals suggest a 
binary state for such a volatile data layer. That is, 

3 0 the fragile watermark layer is considered to be either 
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present or absent. Moreover, the volatile data is 
designed to be removed by very small manipulations of 
the content. In other words, with prior art schemes, 
the volatile, fragile watermark data can only survive a 
5 perfect bit-for-bit digital copy of the content. 

While such prior methodologies might be adequate to 
authenticate an original copy of digitized content, 
their usefulness is challenged by the emerging concept 
of legitimate versus illegitimate manipulations. 

10 Indeed, conflicts between consumer rights and the 

content providers' (e.g., entertainment industry's) 
interests are drawing a rather fuzzy line between what 
consumers can and cannot do with an original copy of 
valuable content they purchased. If a system based on 

15 volatile data is used to prevent mult i -generational 

copying (i.e., making a first copy of an original, 
making a second copy from the first copy, and so forth) , 
it should also be able to preserve the consumer's rights 
regardless of the technological limitation of their 

2 0 equipment. As an example, a consumer should be allowed 

to make a first generation copy of audio content he/she 
purchased (such as on a portable medium such as a CD, or 
downloaded via a network such as the Internet to a 
computer storage device) , even if his/her audio (CD) 
25 capturing equipment does not provide perfect digital 

transfers. For example some digital captures may 
involve digital-to-analog- to-digital conversions . ■ Also, 
some CDs may have minor scratches that are patched over 
by a digital interpolation with only a minor degradation 

3 0 in quality, but still not making a perfect signal copy. 
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Further, a high resolution audio signal (e.g., 96 kHz 
sampling rate, 24 bit per sample resolution) can be 
copied into the lower resolution CD format of 44.1 kHz 
sampling rate, 16 bit per sample resolution. Here 
5 again, the signal copy is not perfect. All such copies 

may be allowed, while content manipulations involving 
perceptual compression methods (such as MPEG) may be 
prohibited. 

In contrast to the prior art, the present invention 

10 introduces a softer concept for a Fragile Watermark. 

While the proposed watermarking layer of the present 
invention is designed to be prone to degradation, it is 
also designed to degrade gracefully, as opposed to 
disappearing after any arbitrarily minor manipulation of 

15 the content. The present invention further suggests an 

appropriate analysis that uses this graceful degradation 
in the context of a content -dependent fragility 
analysis, to derive a quantitative measurement of the 
amount of "processing" that was applied to the valuable 

20 content. The "processing" includes manipulations such 

as analog- to-digital conversions, resampling, reduction 
in bit depths (number of bits per sample) , band- 
limiting, perceptual compression, collapsing multi- 
channel audio into stereo or mono (for audio content) , 

25 recording on analog media, and digital or analog 

broadcast . 

Another objective of the present invention is to 
provide consumers with a quality assurance tool. 
Generally, it can be hard for the consumer to establish 
3 0 if the digital object he has acquired (digital music, 
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image, video, etc.) is of high quality, matching that of 
the master copy, or if it has been degraded through 
distribution channels. Using the herein proposed 
Fragile Watermark, and appropriate detection hardware 
5 and/or software, it is possible to quantify the damage 

suffered in the distribution channel without directly 
comparing the content to the master copy. 

Moreover, the fragility analysis component of the 
present invention can be used for a variety of other 

10 applications. Indeed, the analysis of the content's 

intrinsic fragility can be measured to inform a user 
that a watermark he/she is about to embed within the 
content is not going to survive in a selected channel. 
In cases where the content is explicitly produced with a 

15 known mode of distribution in mind, the user may wish to 

compensate for such content -dependant fragility and 
increase the strength of the watermark he/she is about 
to embed appropriately. 

The present invention provides a data processing 

20 system having the above and other advantages. 



WO 01/73997 



PCT/US01/09305 



7 



SUMMARY OF THE INVENTION 

The present invention provides a system for 
determining the amount of processing that has been 
applied to a watermarked signal. 
5 The present invention provides means by which the 

degradation of a carefully designed watermark layer 
provides a quantitative measure of the amount of 
processing that was applied to valuable content (such as 
audio, video and image data) since the watermark was 

10 first embedded in the content. 

The essence of the present invention includes the 
design of a fragile watermarking layer that owes its 
robustness to a large amount of redundancy, while 
injecting small amounts of energy in the cover signal 

15 (i.e., the valuable content). Such a Fragile Watermark 

layer is prone to degradation when the cover signal 
undergoes various processing stages, but still remains 
readable due to its large redundancy. 

An acquired version of the content (such as audio 

2 0 data acquired by a user on a CD, or via an Internet 

download) is analyzed by measuring the degradation of 
the fragile watermark layer to derive a quantitative 
estimate of the amount of processing that was applied to 
the content since its original release (i.e., since the 

25 watermarking stage) . The measurement of the degradation 

is taken in the context of a content -dependent Fragility 
analysis, and allows a determination of the nature 
and/or the amount of the processing that the content has 
experience, and whether the acquired content closely 
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matches (to within a desired tolerance) the content 
before it underwent the processing. 

Moreover, the fragility of the watermark can be 
measured to inform a user that the watermark is not 
5 going to survive in a selected channel, and that its 

strength should be increased accordingly. 

Corresponding methods and apparatuses are 
presented . 
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BRIEF DESCRIPTION OF THE DRAWINGS 

These and other aspects of the present invention 
will become more fully understood from the following 
detailed description of the preferred embodiments in 
5 conjunction with the accompanying drawings, in which: 

FIG. 1(a) is a top-level block diagram that 
illustrates a watermark embeddor, a distribution 
channel, and a content processing estimator for deriving 
a quantitative measure of the amount of processing that 
10 was applied to valuable content based on the degradation 

of a watermark, in accordance with the present 
invention. 

FIG. 1(b) illustrates an example fragility profile 
in accordance with the present invention. 
15 FIG. 2 is a block diagram of a watermark embeddor 

in the context of a first example of the preferred 
embodiment of the invention. 

FIG. 3 is a block diagram of a content processing 
estimator in the context of the first example of the 
2 0 preferred embodiment of the invention. 

FIG. 4 is a block diagram of a watermark embeddor 
in the context of the second example of the preferred 
embodiment of the invention. 

FIG. 5 is a block diagram of a content processing 
25 estimator in the context of the second example of the 

preferred embodiment of the invention. 

FIG. 6 is a block diagram of a watermark embeddor 
in the context of the third example of the preferred 
embodiment of the invention. 
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FIG. 7 is a block diagram of a content processing 
estimator in the context of the third example of the 
preferred embodiment of the invention. 

FIG! 8 is a block diagram of a watermark embeddor 
5 in the context of the fourth example of the preferred 

embodiment of the invention. 

FIG. 9 is a block diagram of a content processing 
estimator in the context of the fourth example of the 
preferred embodiment of the invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

The present invention provides a system for 
determining the amount of processing that has been 
applied to a watermarked signal. 

The following preferred embodiment is specifically 
set in the context of applications where the content 
comprises audio recordings, but is applicable generally 
to any type of data that can carry a watermark. 

Like-numbered elements correspond to one another in 
the figures. 

FIG. 1(a) is a top-level block diagram that 
illustrates a watermark embeddor, a distribution 
channel, and a content processing estimator, in 
accordance with the present invention. 

Prior to its distribution via a distribution 
channel, which might include recording on storage media 
4, the cover (audio) signal 1 goes through a preparation 
stage, which include a watermark embeddor 2, leading to 
a clear "stego" ( steganographic) signal 3. The cover 
signal comprises the audio content whose access is to be 
controlled by a watermark. The watermark embeddor 2 
should be designed to embed digital data (watermark 
data) within the cover signal without affecting the 
quality of the content. For example, for audio data, 
the watermarked data should be provided substantially 
inaudibly . 

If the content remains within the secure 
environment, the secure wrapper (encryption) serves as 
authentication. Even though the fragile watermark might 
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be damaged by perceptual compression, the compliant 
player/viewer doesn't need to rely on this watermark (it 
has the digital secure wrapper to attest to the copy' s 
legitimacy) . In the context of the preferred embodiment 
5 for this invention, we envision using the feature- 

modulation watermarking techniques described in any of 
U.S. Patent 5,94 0,135 to Petrovic at al . , entitled 
"Apparatus and Method for Encoding and Decoding 
Information in Analog Signals," issued August 17, 1999; 

10 U.S. Patent Application Serial No. 08/974,920 to 

Petrovic at al . , entitled "Apparatus and Method for 
Embedding and Extracting Information in Analog Signals 
Using Distributed Signal Features," filed November 20, 
1997, now U.S. Patent 6,175,627, issued January 16, 

15 2001; and U.S. Patent Application Serial No. 09/106,213 
to Petrovic, entitled "Apparatus and Method for 
Embedding and Extracting Information in Analog Signals 
Using Replica Modulation," filed June 29, 1998, now U.S. 
Patent , issued ; all of which are 

20 commonly assigned to the assignee hereof, and are 

incorporated herein by reference. 

These core watermarking technologies, offered by 
Verance Corp., offer many advantages, including a higher 
degree of resistance to forgery than least-signif icant- 

25 bit (LSB) approaches to Fragile watermarking. This 

advantage occurs since Verance 's watermarks are 
intimately related to the original signal and cannot be 
stripped and transferred from one digital object to 
another, or from original to later generations of the 

3 0 same digital object. 
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As the content is distributed to an end-user's 
receiver 10, the user will eventually hold an acquired 
stego signal 5, which was derived from the clear stego 
signal 3 through the distribution channel 4 . The nature 
5 of the processing within this distribution channel is 

unknown, and we recall that the purpose of this 
invention is to gain a quantitative measurement of the 
severity of this processing. The content processing 
estimator 6 is the module that is responsible for 

10 deriving such a quantitative estimate 7 from the 

analysis of the acquired stego signal 5. As mentioned, 
this analysis stage is partially based on the measured 
degradation of a Fragile watermark layer that was 
embedded within the content by the original watermark 

15 embeddor 2 . 

The receiver 10 also includes an output control 11 
that receives the processing estimate and the acquired 
stego signal. Based on the processing estimate, the 
output control 11 may output the stego signal and/or a 

20 message to the user. The output control 11 also may 

receive a user input . 

Below, we discuss general issues surrounding the 
design of robust and fragile watermarks before we 
present alternative choices for the nature of the 

25 watermark embeddor 2 and the corresponding content 

processing estimator 6. 

1. About The Robustness And Fragility Of 
Watermarks 

• Designing A Fragile Watermark Layer 

3 0 Verance ' s distributed feature modulation core 
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technology, referenced above, was originally designed to 
lead to both transparent and robust watermarks. This 
technology can be adapted to the design of a fragile 
watermark layer in accordance with the present 
5 invention. Indeed, the physical layer that carries the 

watermark can be tuned to inject smaller amounts of 
energy within the content . This leads to watermarks 
that are typically more prone to degradation than in the 
context of other "Robust Watermark" applications, such 

10 as, e.g., content identification for instance. At the 

same time, such a "fragile" physical layer is used to 
transmit highly redundant information to make up for the 
fact that it is prone to such degradation. As a simple 
example of added redundancy, we can repeat the same data 

15 bits, e.g., tens or hundreds of times. The resulting 

raw bit stream has a much higher rate than the actual 
data (tens or hundreds of times) . Even if ' a high 
percentage of those raw bits are destroyed through the 
distribution channel, it is still possible to recover 

20 the original data bits reliably. Further, after 

recovering these data bits, it is possible to look at 
the percentage of incorrect bits in the raw bit stream 
and to derive a bit-error-rate (BER) measurement. 
Alternative ways to add redundancy to increase 

2 5 robustness of the data include repetition of the 

segments of the watermark, repetition of the whole 
watermark, and/or utilization of error correction codes, 
well known to those skilled in the art. 

Besides using less energy and higher redundancy 

3 0 than in a Robust Watermark, other technology adjustments 
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are important as well. These adjustments may be 
classified in two groups: (a) improvement in the 
watermark presence in the clear signal, and (b) increase 
of the watermark sensitivity to additive white Gaussian 
5 noise (AWGM) . 

Generally speaking, the distributed feature 
modulation techniques referenced above insert a 
watermark in such a way to move a desired feature of the 
watermark (such as the short-term autocorrelation) to a 

10 chosen target value. However, such a process is 

imperfect, and small variations occur due to non- ideal 
filtering, inter-symbol interference, approximations in 
the algorithm, etc. Those variations are less 
significant for a Robust Watermark, since there is more 

15 inserted energy, and more tolerance to inherent 

variations. In the case of a Fragile Watermark, it is 
important to reduce all imperfections as much as 
possible and use inserted energy very precisely. In 
accordance with the invention, we found that it is 

20 advantageous to use an iterative process. Specifically, 

after the fragile watermark is embedded, we go back and 
analyze if the target feature values are met, and if 
not, we make corrections to the inserted watermark to 
get closer to the chosen target. 

25 AWGN represents a typical signal corruption in a 

signal distribution chain. Besides, many other 
distortions can be approximated with AWGN, such as 
quantization noise in analog-to-digital (A/D) 
conversion, lossy compression noise (such as MPEG 

30 noise) , nonlinear distortion noise, etc. Therefore, it 
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is important to make the Fragile Watermark sensitive to 
AWGN and similar types of distortion. One way is to use 
a smaller amount of energy for watermark embedding. 
Then, for the same amount of AWGN, the signal-to-noise 
5 ratio (SNR) at the watermark detector becomes worse, and 

the watermark deterioration more evident. 

Further, we found that it is advantageous to insert 
a watermark biased toward high frequencies of the signal 
spectrum. Typically, at high frequencies, there is less 

10 of the signal energy, while AWGN is uniformly 

distributed over the frequency axis. Therefore, the 
presence of noise is easier to detect at high 
frequencies than at low frequencies . 

In the context of the present invention, the 

15 "Presence" of a fragile watermark layer refers to a 

quantitative measurement of the certainty with which 
such layer is read from the content. It is not meant to 
be restricted to a two-stage, binary value (e.g., where 
the fragile watermark layer is considered to be either 

2 0 present or absent) . For example, the Presence can take 

the form of a measured raw bit error rate at the level 
of the raw bit stream that carries the watermark. 

The Presence of such a fragile watermark layer can 
subsequently be used to quantify the content's 
25 degradation. 

• About The Relevance Of The Measured Presence 
Of A Watermark Layer 

It is imperative for any useful watermarking 
technology that the process of embedding a watermark 

3 0 within content does not lead to perceivable artifacts. 
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The watermarked content (e.g., audio host signal) should 
be perceptually identical to its original non- 
watermarked parent with respect to its intended use. 
This typically has two major implications. 
5 First, content (or a section of the content) that 

is naturally weak (for instance, it might exhibit very 
little energy within the coding band) , is also a weak 
carrier of the embedded watermark data . This data will 
subsequently be particularly prone to degradation. 

10 Second, for content (or a section of the content) 

that is determined to be perceptually sensitive (i.e., 
perturbations are more likely to lead to perceptual 
artifacts) , the watermarking technology will typically 
tend to tone the watermark down (i.e., reduce the 

15 strength of the watermark) . For audio content, the task 

of estimating such sensitivity is performed by a 
psychoacoustic analysis stage, which accounts for human 
hearing characteristics. For example, a steady single 
instrument tone is typically more sensitive than a noisy 

20 rock concert segment. The resulting content -dependent 

adjustments of the physical layer essentially weaken the 
watermarks that are being embedded in sensitive segments 
of the content . 

The two previous cases clearly illustrate that the 

25 Fragility of a watermark is always content-dependent. 

It follows that, to estimate the amount of processing 
that was applied to the content, a Presence measurement 
may not be sufficient. Such a measurement will have to 
be taken in the context of a Fragility analysis of the 

3 0 content that carries the watermark. 
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• About Fragility Analysis 

We recall that "Presence" is a quantitative 
measurement of the certainty with which a Fragile 
Watermark is read from the content . 
5 The purpose of a Fragility analysis module in 

accordance with the invention is to estimate the 
Fragility Profile of a fragile watermark layer in the 
case of content contamination. We recall from our prior 
discussion that fragility is content - dependant . The 
10 Fragility Profile is a model that describes how quickly 

the Presence of the fragile watermark will decrease when 
the content is submitted to increasingly severe 
contaminations (deterioration/degradation) . 

For example, as shown in FIG. 1(b), the Fragility 
15 Profile could describe a piece-wise linear function 100 

approximating the relationship between the BER of the 
watermark's raw bit stream and the signal to noise ratio 
resulting from an additive white noise contamination of 
the watermarked content . This choice of a simple piece- 
20 wise linear description could lead to a Fragility 

Profile of the following form: 
BER = 0.5 if SNR<SNR min ; 
BER = 0.0 if SNR>SNR raa3t ; and 

BER = 0.5* (SNR^-SNR) / (SNR max -SNR min ) otherwise. 
25 In the context of such model, the Fragility 

analysis module would simply output the data pair 
(SNR min ; SNR max ) for distribution to a decoder. 

By measuring the Fragile watermark layer's Presence 
from a segment of an acquired copy of the content, and 
30 estimating the Fragility Profile for this segment in a 
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Fragility analysis module, we are able to estimate how 
much processing was applied to this copy within the 
unknown distribution channel. For example, by measuring 
the BER in the received Fragile Watermark raw bit 
5 stream, and estimating the rate at which the BER 

increases with the energy of an additive noise 
contamination, we can estimate how much noise was 
introduced by the distribution channel. Based on this 
result, we can further deduce whether an illegitimate 

10 processing has occurred. 

For example, if the measured BER in the received 
Fragile Watermark raw bit stream is 0.25 (or 25%) and 
the estimated rate at which the BER increases with the 
energy of an additive noise contamination is expressed 

15 by our previous piece-wise linear Fragility Profile 

example with: 

<SNR min ; SNR ma J = (OdB; 80dB) , 

then SNR = SNR max -2*BER* (SNR raax -SNR min ) ; 

i.e., SNR = 80-160*BER = 80-160*0.25 = 40dB; 

20 i.e., we can estimate that the contamination that 

was introduced by the distribution channel is equivalent 
to a 40dB SNR additive noise contamination. If it were 
further established within some usage rules that any 
manipulation leading to an SNR of 5 OdB or less was 

25 illegitimate, we could conclude that illegitimate 

processing had occurred. 

This Fragility analysis can take place either at 
the detection stage, e.g., within the content processing 
estimator module 6 (FIG. 1(a)), or at the embedding 

3 0 stage, within the watermark embeddor 2. In the latter 
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case, the outcome of such analysis is communicated to 
the estimator module 6 via some persistent data channel . 

Optionally, the content's intrinsic fragility can 
be measured to inform a user that a watermark he/she is 
5 about to embed within the content is not going to 

survive in a selected channel, thereby enabling the 
strength of the watermark to be increased by the user. 
Or, the strength of the watermark can be increased 
automatically. 

10 As discussed earlier, a Fragile watermark layer may 

still be able to convey such persistent data if this 
data is encoded with a sufficient redundancy. As an 
alternative, or perhaps as a way to extend the system's 
range of operation, an additional robust watermark layer 

15 could convey such persistent data. 

Deriving an estimate of the Fragility Profile may 
be achieved in a variety of ways within the Fragility 
analysis. As an illustration, the following are three 
major classes of methods that may be used. 

2 0 (1) On one hand, this estimate can be derived from 

an actual measurement. For instance, the Fragility 
analysis could watermark the Fragile layer, contaminate 
the content, and measure the resulting Presence for the 
layer. While such a method might appear costly, it may 
25 share a lot of processing with other modules that 

constitute the watermark embeddor 2. This alternative 
may be particularly appropriate in cases where the 
Fragility analysis is to take place at the watermark 
embeddor stage 2 . 

3 0 (2) Similarly, some watermarking techniques may 
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offer self -diagnosis indicators at the embedding stage. 
In other words, the watermark embedding process may 
already provide data that can be used to quantify the 
Fragility of the embedded watermark for no additional 
5 cost. As an illustration, a measure of the actual 

energy that was injected within the cover signal may be 
a reasonable data to derive the Fragility Profile from. 
Once again, such an alternative is most likely to be 
appropriate in cases where the Fragility analysis is to 

10 take place within the watermark embeddor 2. 

(3) On the other hand, the exact nature of the 
watermark methodology typically suggests audio signal 
features that indicate the intrinsic fragility of the 
watermark layer. From the previous discussion, and for 

15 the purpose of the preferred embodiment, we suggest two 

types of time -varying features that may be derived from 
the audio content to predict its inherent fragility: the 
coding band's energy, and its psychoacoustic 
sensitivity. The coding band will correspond to the 

2 0 component of the original content that is used to carry 

the watermark. Any component that is outside of this 
coding band is ignored by the watermarking stage and, as 
such, its energy is irrelevant to the ability of the 
audio content to carry the watermark. Similarly, a 
25 relevant estimation of the content's psychoacoustic 

sensitivity should follow similar principles as the 
analysis that takes place within the watermark embeddor 
2 . 

We recall that psychoacoustic sensitivity is a 

3 0 measure of the potential that a perturbation may produce 
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perceivable artifacts. For example, segments of the 
audio content that exhibit sharp spectral peaks are 
typically more psychoacoustically sensitive. This 
characteristic has traditionally been referred to as the 
5 content's tonality. For cost-effectiveness, an estimate 

of the Fragility Profile can be derived from only a 
subset of all known relevant audio signal features. 

The three previous classes of approaches are 
examples only, as the fragility analysis of the present 
10 invention may be designed in any number of ways. The 

three classes illustrate three major design 
philosophies . The best approach can share concepts of 
these classes, as they are not mutually exclusive. 

2 . Solutions Using A Fragile Watermark Layer Only 

15 We recall that, despite its "fragility-by-design", 

a Fragile watermark layer may still convey persistent 
data if this data is encoded with sufficient redundancy. 
This section presents examples of the invention's 
embodiments which use only a fragile watermark layer. 

20 We also recall that the essential fragility analysis may 

take place either at the detection stage within the 
content processing estimator 6, or at the embedding 
stage within the watermark embeddor 2 . Examples 1 and 
2, below, illustrate these two alternatives. 

25 • Fragility Analysis At The Detection Stage - 

Example 1 

FIG. 2 and FIG. 3 illustrate the choices for the 
architecture of the watermark embeddor 2 and the 
corresponding content processing estimator 7 in the 
3 0 context of this example. On the embeddor side (FIG. 2) , 
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the cover signal 1 is processed through a fragile 
watermark generator 24 to lead to the clear stego signal 
3 . The fragile watermark data 22 is fixed with respect 
to the cover signal fragility. To ensure that the 
5 entire embedding process does not affect the audio 

quality of the cover signal, the watermark generator 24 
is controlled by a psychoacoustic / sensitivity analysis 
module 21, which analyzes the cover signal 1 and 
produces its predicted sensitivity 23. The higher the 

10 predicted sensitivity, the less energy will be injected 

by the watermark generator 24. 

On the processing estimator (receiver) side (FIG. 
3), the acquired stego signal 5 is sent to both a 
fragile watermark detector 62 and a fragility analysis 

15 module 61. The detection results provide a Presence 

Measure 64 for each detected fragile watermark. At the 
same time, the fragility analysis 61 provides a 
Fragility Profile 63. We recall that this profile 
provides an expectation of the deterioration in the 

20 fragile layer's presence following various degrees of 

content contamination. A logic module 65 estimates the 
amount of processing in the distribution channel based 
on the Fragility Profile 63 and the Presence Measure 64. 
The result can be presented as an output labeled 

25 Processing Estimate 7. 

The Processing Estimate 7 can be further compared 
to a maximum allowed processing value, e.g., at the 
output control 11, and, if the estimated processing is 
above the threshold, illicit re-packaging is deduced, 

3 0 and further usage is prevented. Specifically, an 
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illicit re-packaging message can be sent to the user. 
Alternatively, the user can be informed that the digital 
object he has acquired does not meet a high quality- 
criterion, via a poor cover signal quality message, and 
5 leave further action to the user, e.g., via the user 

input. If there is no illicit re-packaging, e.g., the 
estimated processing is not above the threshold, the 
stego signal can be output, e.g., to a monitor, TV set, 
speakers or to a memory, or for another use as desired 
10 by the user. 

• Fragility Analysis At The Embedding Stage - 
Example 2 

FIG. 4 and FIG. 5 illustrate the choices for the 
architecture of the watermark embeddor 2 1 and the 

15 corresponding content processing estimator 6 1 in the 

context of this example. On the embeddor side (FIG. 4), 
the cover signal 1 is processed through a fragile 
watermark generator 24' to lead to the clear stego 
signal 3 . The fragile watermark data 2 2 is combined 

20 with the results of the fragility analysis module 2 6 to 

form a message that is embedded into the cover signal 1. 
As previously seen with the watermark generator 24 (FIG. 
2), the watermark generator 24' is controlled by a 
psychoacoustic / sensitivity analysis module 21, which 

25 analyzes the cover signal 1 and produces its predicted 

sensitivity 23 . 

The Fragility analysis function 25 provides a 
Fragility Profile to the Fragile watermark generator 
24'. This information is carried in the watermark in 

3 0 the clear stego signal. 



WO 01/73997 



PCT/US01/09305 



25 



On the processing estimator side (FIG. 5), the 
acquired stego signal 5 is sent to the fragile watermark 
detector 62'. The detected watermark data that is 
carried by this layer provides a Fragility Profile 63 ' 
5 for the physical layer. The detection results provide 

an actual Presence Measure 64' for each detected fragile 
watermark. The desired Processing Estimate 7 is then 
derived from the Fragility Profile 63' and the Presence 
Measure 64 1 , by the logic in the module 65 1 . Such a 
10 logic module 65 1 is very similar to the module 65 used 

in the previous example. 

For FIGs 5, 7 and 9, an output control may also be 
used as discussed above in connection with the output 
control 11 of FIG. 3. Additionally, the content 
15 processing estimator 6' , 6' 1 and 6' ' ' may be provided in 

a receiver corresponding to the receiver 10 of FIG. 3. 

The receiver may be located with a recording 
device, such as a PC or DVD/CD recorder, but it can be 

located in players as well. 
20 3. Solutions Using Both Fragile And Robust 

Watermark Layers 

As discussed, the designer of the system may wish 
to use a Robust watermark layer in addition to the 
Fragile Watermark layer. This might be done to extend 

25 the system's range of operation, i.e., to allow the 

system's operation even in an environment where a 
fragile watermark cannot survive, such as low rate 
perceptual compression channels, severe band-limiting 
channels, noisy tape recording channels, etc. Further, 

30 the robust watermark can carry more data efficiently, 
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and the fragile watermark can be better tailored to the 
signal processing measurement if it does not need to 
carry too much information. 

As before, we also recall that the essential 
5 fragility analysis may take place either at the 

detection stage within the content processing estimator 
6, or at the embedding stage within the watermark 
embeddor 2. Example 3 and Example 4 below illustrate 
these two alternatives. 
10 • Fragility Analysis At The Detection Stage - 

Example 3 

FIG. 6 and FIG. 7 illustrate the choices for the 
architecture of the watermark embeddor 2 ' ' and the 
corresponding content processing estimator 6 1 1 in the 

15 context of this example. On the embeddor side (FIG. 6), 

the cover signal 1 is processed through a robust 
watermark generator 28, a fragile watermark generator 
24, and a combiner 29 to form the clear stego signal 3, 
which carries both robust and a fragile watermark 

20 layers. In the context of this example, both the robust 

and the fragile watermarks carry fixed watermark data 
with respect to the fragility analysis. As discussed, 
the watermark generators 24 and 2 8 are controlled by a 
psychoacoustic / sensitivity analysis module 21, which 

25 analyzes the cover signal 1 and produces its predicted 

sensitivity 23 . 

On the processing estimator side (FIG. 7) , the 
acquired stego signal 5 is sent to both a watermark 
detector 69 and a fragility analysis module 61. The 

3 0 watermark detector 69 is designed to look for both the 
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robust watermark layer and the fragile watermark layer. 
The detection results include the extracted robust 
watermark and a Presence Measure 64 for each detected 
fragile watermark. At the same time, the fragility 
5 analysis 61 provides a Fragility Profile 63, which 

provides an expectation of the fragile layer's 
deterioration following various amounts of content 
contamination. The desired Processing Estimate 7 is 
then derived from the Fragility Profile 63 and the 
10 Presence Measure 64, by the logic module 65 1 ' . 

• Fragility Analysis At The Embedding Stage - 
Example 4 

FIG. 8 and FIG. 9 illustrate the choices for the 
architecture of the watermark embeddor 2 ' 1 1 and the 

15 corresponding content processing estimator 6' 1 ' in the 

context of this example. On the embeddor side (FIG. 8), 
the cover signal 1 is processed through a robust 
watermark generator 28, a fragile watermark generator 
24, and a combiner 29 to form the clear stego signal 3, 

20 which carries both a robust watermark layer and a 

fragile watermark layer. While the fragile watermark 
data 22 is fixed with respect to the fragility analysis, 
the robust watermark data 27 is combined with the 
results of the fragility analysis module 25 to yield a 

25 message that is embedded into the cover signal 1. 

Both watermark generators 24 and 2 8 are controlled 
by a psychoacoustic / sensitivity analysis module 21, 
which analyzes the cover signal 1 and produces its 
predicted sensitivity 23. The Fragility Profile 26 that 

30 was estimated by the fragility analysis module 25 can 
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further influence the fragile watermark generator. For 
instance, one may wish to bypass the generation of the 
fragile watermark layer if such an estimate indicates 
that such a fragile layer has a very small chance to 
5 survive any subtle manipulation of the content. 

On the processing estimator side (FIG. 9), the 
acquired stego signal 5 is sent to both a robust 
watermark detector 66 and a fragile watermark detector 
62. The Fragility Profile 67 for the fragile layer is 

10 carried by the robust watermark data. At the same time, 

the fragile watermark detector 62 provides detection 
results in the form of a Presence Measure 64 for each 
detected fragile watermark. The desired Processing 
Estimate 7 is then derived from the Fragility Profile 67 

15 and the Presence Measure 64, by the logic module 65 ' ' ' . 

Conclusion 

It should now be appreciated that the present 
invention provides a system for determining the amount 
of processing that has been applied to watermarked 

.20 signals. In particular, a steganographic signal is 

provided that includes audio, video or other content, 
along with an embedded fragile watermark. The fragile 
watermark is obtained by adjusting the energy of a 
fragile watermark layer and providing additional 

25 redundancy for this data. The steganographic signal is 

communicated over a distribution channel to a decoder. 
At the decoder, a measure of a presence of the fragile 
watermark in the acquired steganographic signal is 
provided, along with an estimate of the content - 

3 0 dependant fragility profile of the fragile watermark. 
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Based on these factors, a processing estimate is made 
that indicates the amount of processing that the 
steganographic signal has undergone. This processing 
can include, for example, D/A and A/D conversions, 
5 perceptual compression/decompression, resampling, bit 

depth reductions, band-limiting, dynamic range 
reductions, broadcasting over TV or radio channels, and 
so forth. 

Optionally, the Fragility Profile is derived prior 

10 to the distribution of the content and communicated in 

the steganographic signal for recovery by the decoder. 

Furthermore, a robust watermark may be provided in 
the steganographic signal that, e.g., designates the 
presence of the fragile watermark to a decoder. 

15 In a further option, the content's intrinsic 

fragility can be measured to inform a user that a 
watermark he/she is about to embed within the content is 
not going to survive in a selected channel, thereby 
enabling the strength of the watermark to be increased. 

2 0 Although the invention has been described in 

connection with various specific embodiments, those 
skilled in the art will appreciate that numerous 
adaptations and modifications may be made thereto 
without departing from the spirit and scope of the 

25 invention as set forth in the claims. 
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What is claimed is: 

1. A method for using a watermark to estimate a 
nature and/or an amount of processing that is applied to 
a signal, comprising the steps of: 

embedding a watermark with a degree of redundancy 
into the signal to form a steganographic signal; 

measuring a deterioration of the embedded watermark 
in the steganographic signal after the steganographic 
signal undergoes the processing; and 

estimating the nature and/or the amount of the 
processing based on the measured deterioration. 

2. The method of claim 1, wherein: 

said estimating step estimates an intrinsic 
fragility of the watermark by analyzing characteristics 
of the steganographic signal. 

3. The method of claim 1, comprising the further 
step of: 

controlling an output of the steganographic signal 
when the amount of the estimated processing exceeds a 
threshold level, or the nature of the estimated 
processing is of a specified type. 

4. The method of claim 1, wherein: 

the nature and/or the amount of the estimated 
processing indicates whether the steganographic signal 
has undergone unauthorized processing. 
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5. The method of claim 1, wherein: 

a user acquires the steganographic signal after it 
undergoes the processing,- and 

the nature and/or the amount of the estimated 
processing indicates whether the acquired steganographic 
signal closely matches the steganographic signal before 
it undergoes the processing. 

6. The method of claim 5, comprising the further 
step of: 

providing a message to the user indicating whether 
the acquired steganographic signal closely matches the 
steganographic signal before it underwent the 
processing. 

7. The method of claim 1, wherein the processing 
that the steganographic signal undergoes comprises at 
least one of: 

multi-generational copying; 

perceptual compression and decompression; 

digital -to- analog and analog- to-digital conversion; 

resampling; 

a bit depth reduction; 
band-limiting; 

dynamic range reduction; and 

transmission over a communication channel . 

8. The method of claim 1, wherein: 

the deterioration of the embedded watermark is 
measured in accordance with a fragility profile of the 
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embedded watermark. 

9. The method of claim 8, wherein: 

the fragility profile denotes a relationship 
between a bit error rate of the watermark and a signal 
to noise ratio of the steganographic signal. 

10. The method of claim 1, wherein: 

the watermark is embedded in the signal in 
accordance with a predicted sensitivity of the signal 
that is based on a psychoacoustic analysis thereof. 

11. The method of claim 1, wherein: 

the steganographic signal further includes an 
embedded robust watermark that signals a receiver that 
the watermark with redundancy is present in the 
steganographic signal . 

12. The method of claim 1, wherein: 

the steganographic signal comprises at least one of 
audio and video content. 

13 . A method for providing a signal with a 
watermark layer, comprising the steps of: 

analyzing an intrinsic fragility of the signal, 
which is a carrier of the watermark layer; and 

determining a fragility profile in response to said 
analyzing step; 

wherein the fragility profile is a model or a 
function that relates a degradation measure of the 
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watermark layer to a degradation measure of the signal 
that carries the watermark . 

14. The method of claim 13, wherein the watermark 
layer is embedded into the signal to form a 
steganographic signal, comprising the further step of: 

subjecting the steganographic signal to at least 
one processing step; 

wherein the fragility profile denotes a 
deterioration of the embedded watermark layer due to 
said at least one processing stage. 

15. The method of claim 13, wherein: 

the intrinsic fragility analysis is applied to a 
cover portion of the signal before the signal is 
degraded by at least one processing step to indicate 
whether or not the watermark layer will survive the 
processing step. 

16. The method of claim 15, comprising the further 
step of: 

increasing a power of the watermark layer in the 
signal before the signal is degraded by the processing 
step if the intrinsic fragility analysis indicates that 
the watermark layer will not survive the processing 
step . 

17. The method of claim 13, wherein: 

the intrinsic fragility analysis is applied to a 
cover' portion of the signal to suggest eventual 
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modifications of a configuration a watermarking system 
used to provide the watermark layer to ensure a survival 
of the watermark layer through a specified processing 
stage . 

18. The method of claim 13, wherein: 

after the analyzing and determining steps, the 
signal, and data designating the fragility profile, are 
distributed to a decoder. 

19. The method of claim 18, wherein.- 

the data designating the fragility profile is 
carried in the signal . 

20. The method of claim 18, wherein: 

the data designating the fragility profile is 
carried in the signal in another watermark layer. 

21. The method of claim 13, wherein: 

the fragility profile denotes a relationship 
between a bit error rate of the watermark layer and a 
signal to noise ratio of the signal after the watermark 
layer and the signal are degraded. 

22 . An apparatus for using a watermark to estimate 
a nature and/or an amount of processing that is applied 
to a signal, comprising: 

means for embedding a watermark with a degree of 
redundancy into the signal to form a steganographic 
signal ,- 
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means for measuring a deterioration of the embedded 
watermark in the steganographic signal after the 
steganographic signal undergoes the processing; and 

means for estimating the nature and/or the amount 
of the processing based on the measured deterioration. 

23 . An apparatus for providing a signal with a 
watermark layer, comprising: 

means for analyzing an intrinsic fragility of the 
signal, which is a carrier of the watermark layer,- and 

means for determining a fragility profile in 
response to said analyzing step ,- 

wherein the fragility profile is a model or a 
function that relates a degradation measure of the 
watermark layer to a degradation measure of the signal 
that carries the watermark. 
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